Ticket #2018 (new defect) — at Initial Version

Opened 15 years ago

Last modified 15 years ago

FTPFS: strcpy() is used for overlaping strings

Reported by: andrew_b Owned by: andrew_b
Priority: major Milestone: 4.7.1
Component: mc-vfs Version: master
Keywords: Cc:
Blocked By: Blocking:
Branch state: Votes for changeset:

Description

There is a following code in lib/vfs/mc-vfs/ftpfs.c file:

220         /* replace first occurance of ":/" with ":" */
221         if ((p = strchr (ret, ':')) && *(p + 1) == '/')
222             strcpy (p + 1, p + 2);

But strcpy() must not used for overlaping objects.

Note: See TracTickets for help on using tickets.